Behavioral task
behavioral1
Sample
JaffaCakes118_0b85660316a984f01c14f1d506baef2c.exe
Resource
win7-20240729-en
General
-
Target
JaffaCakes118_0b85660316a984f01c14f1d506baef2c
-
Size
721KB
-
MD5
0b85660316a984f01c14f1d506baef2c
-
SHA1
96c2ada7dde2a3be12322912eb59e818e5eee237
-
SHA256
9fb3df1f6e67997424bec5280384bfe71ea1244a5b5cd25d7b8744c4fe8b30f4
-
SHA512
f86f3da64f772f17fa640a0ce1b7cddf156a32859a226a93788f72cc4990bab97d96bd549cb300ad373625fc5271105d4b1841f318a94bfdf29037b5e1ff1f84
-
SSDEEP
12288:f4G8UaT9XY2siA0bMG09xD7I3Gg8ecgVvfBoCDBOQQYbVXpuy1f/gORix:f2UKoN0bUxgGa/pfBHDb+y1HgZ
Malware Config
Extracted
darkcomet
- gencode
-
install
false
-
offline_keylogger
false
-
persistence
false
Signatures
Files
-
JaffaCakes118_0b85660316a984f01c14f1d506baef2c.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: 392KB - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 325KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE